Alertas de Seguridad de la Información

M Crítico vulnerabilidad

12/10/2026

[CVE-2026-85956] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perform backup or restore operations on forests outside the authorized database scope, which could result in unauthorized access to or modification of security-critical data.

nvdcriticovulnerabilidad CVSS 9.6 NVD

M Crítico vulnerabilidad

12/10/2026

[CVE-2026-85947] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an aut…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations. A remote attacker with forest-management privileges could exploit this flaw to create a persistent unauthorized administrator account, potentially resulting in complete unauthorized administrative control of the server.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

12/10/2026

[CVE-2026-85948] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQu…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path. A remote attacker with manage-user-level privileges could exploit this flaw to obtain persistent unauthorized administrative control.

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-85949] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record sec…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 may record security-sensitive information in diagnostic logs under certain configurations. An attacker with access to the affected logs could use this information to obtain unauthorized access to protected resources.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-85950] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an aut…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access authentication material associated with higher-privileged users, potentially resulting in unauthorized administrative access.

nvdaltovulnerabilidad CVSS 8.4 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-85951] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure conta…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 on Azure contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials or tokens.

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-85952] Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before …

Affected Linux-based Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain a server-side request forgery vulnerability that could allow an authenticated attacker to access internal cloud services, potentially resulting in unauthorized access to cloud credentials.

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-85953] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privil…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution under an unintended identity.

nvdaltovulnerabilidad CVSS 8.5 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-85954] Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate u…

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery functions in an elevated security context, which could result in privilege escalation beyond the attacker's granted permissions.

nvdaltovulnerabilidad CVSS 8.6 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109397] Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that a…

Thelia before 3.1.2 and 3.2.x before 3.2.1 contains an unrestricted file upload vulnerability that allows authenticated back-office users to upload PHP files by appending a trailing space to filenames. FileProcessorService validates the raw filename but FileManager::sanitizeFileName() strips the space, storing an executable .php file under public/cache/documents/ for code execution as the web serv…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109398] Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageRes…

Gumlet php-image-resize before 3.0.1 contains a denial of service vulnerability because the ImageResize constructor in lib/ImageResize.php passes images to GD imagecreatefrom* functions without pixel limits. Remote attackers can upload small, highly compressed images that decode to large bitmaps, exhausting PHP memory and terminating the worker process.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109399] SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupd…

SWUpdate through 2026.05.1 contains an improper certificate validation vulnerability in crypto/swupdate_cms_verify_openssl.c that trusts untrusted X.509 certificates embedded in CMS SignedData for chain building. Attackers holding a signing key from a sibling intermediate under the same root can embed that intermediate in the signature to install malicious updates.

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109391] Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows …

Square Squash through commit e73f280 contains an insecure deserialization vulnerability that allows unauthenticated attackers to store crafted YAML via the POST /api/1.0/symbolication endpoint. When occurrences referencing the attacker-controlled symbolication UUID are symbolicated, the stored values are passed to YAML.load with SafeYAML in unsafe mode, enabling arbitrary Ruby object deserializati…

nvdaltovulnerabilidad CVSS 8.1 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-109394] Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::res…

Thirty bees through 1.7.0 contains an authentication bypass vulnerability in PasswordController::resolveCustomer() that allows unauthenticated attackers to reset registered customers' passwords using guest account tokens. Attackers can place a guest order with the victim's email, then use the guest secure key to reset and take over the victim's account when guest checkout is enabled.

nvdaltovulnerabilidad CVSS 7.4 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-108899] A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of t…

A flaw has been found in tobychui zoraxy up to 3.3.4. This impacts the function handleBasicAuth of the file mod/dynamicproxy/authProviders.go of the component Path Exception Matcher. This manipulation of the argument PathPrefix causes improper authorization. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 3.3.5-rc1 will fix this …

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-108900] A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin…

A vulnerability has been found in Exponent CMS up to 3.0.2patch2. Affected is the function userLogin of the file xmlrpc.php of the component XML-RPC. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdaltovulnerabilidad CVSS 7.3 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-108906] A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put…

A vulnerability has been found in Netcore NR268 1.7.121109. This affects the function filter_arp_put_file_cgi of the file /router/filter_arp_put_file.cgi. The manipulation of the argument put_file leads to out-of-bounds read. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not…

nvdaltovulnerabilidad CVSS 7.2 NVD

M Alto vulnerabilidad

12/10/2026

[CVE-2026-108094] A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path…

A use-after-free flaw was found in mutter in the Wayland color-management ICC image-description path. A local attacker who can run a malicious Wayland client can destroy a wp_image_description_v1 resource while an asynchronous ICC file read is still in progress. When the read completes, the compositor uses the freed wl_resource, writes into freed memory, and frees a pointer derived from that memor…

nvdaltovulnerabilidad CVSS 7.8 NVD

M Crítico vulnerabilidad

12/10/2026

[CVE-2026-108895] A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function se…

A weakness has been identified in Linksys E1700 1.0.0.4.003. The affected element is the function setDMZ of the file /goform/setDMZ. Executing a manipulation of the argument MAC_addr can lead to os command injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not …

nvdcriticovulnerabilidad CVSS 9.9 NVD

M Crítico vulnerabilidad

12/10/2026

[CVE-2026-108896] A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of …

A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function setLinksysIpv6 of the file /goform/setLinksysIpv6. The manipulation of the argument _6rd_prefix/_6rd_prefix_len results in os command injection. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

nvdcriticovulnerabilidad CVSS 9.9 NVD